Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/5coov6Ribc4QDydFLWK3f0EUeGE.roa
File: 5coov6Ribc4QDydFLWK3f0EUeGE.roa (raw, json)
Hash identifier: S5pnPHmKK1FR5bsWoC2ob6fczmPnYrh+757KoXoPA6o=
Subject key identifier: E5:CA:28:BF:A4:62:6D:CE:10:0F:27:45:2D:62:B7:7F:41:14:78:61
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D695A5258CEAF6821695EE9B6486882FB
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/5coov6Ribc4QDydFLWK3f0EUeGE.roa
Signing time: Tue 07 Apr 2026 19:10:20 +0000
ROA not before: Tue 07 Apr 2026 19:10:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.155.65.0/24 maxlen: 24
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:3c81::/32 maxlen: 32
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
2a14:42c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:5a:52:58:ce:af:68:21:69:5e:e9:b6:48:68:82:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 7 19:10:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5ca28bfa4626dce100f27452d62b77f41147861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:38:4e:9c:be:b2:ca:ab:77:73:b7:b5:16:
6a:df:e0:62:2a:ff:2c:a5:9c:bb:61:93:1a:f4:d2:
9c:92:68:d3:82:9a:d9:52:35:68:47:88:b5:28:d5:
f9:5d:4a:70:d0:8e:f7:06:12:3d:4a:ca:a1:49:b5:
05:16:93:84:c6:74:99:75:ec:18:23:5b:47:59:c0:
7e:d8:9b:52:29:30:8f:ca:37:3c:a8:c6:3c:75:9c:
e5:8f:06:93:3e:44:d8:7d:9e:2c:17:72:e3:76:4e:
78:ac:48:b1:07:b3:68:1b:31:e0:cf:3c:f5:33:f6:
5c:14:7a:8c:3f:18:a2:ef:e6:65:7d:3b:d8:f9:d9:
ae:aa:a4:8b:08:a4:c4:b7:e0:5a:f6:12:13:80:d8:
29:ec:db:3c:61:e4:4a:6f:58:f0:aa:3b:36:74:19:
9a:dd:a5:04:cc:e6:6f:4c:dc:d5:86:e6:c2:86:0c:
ec:e3:58:fa:03:33:6d:f6:f8:52:29:f3:9e:20:36:
df:14:0f:d0:a4:a1:da:b4:e7:cf:b4:1b:cc:f2:f5:
96:09:5c:9f:06:f0:9a:7c:a3:4f:d9:18:cd:da:d1:
ea:b7:27:83:eb:4c:5d:9c:3d:94:80:5c:36:d3:47:
c8:8a:01:43:23:2d:69:0b:b7:2a:02:80:f5:5c:40:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CA:28:BF:A4:62:6D:CE:10:0F:27:45:2D:62:B7:7F:41:14:78:61
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/5coov6Ribc4QDydFLWK3f0EUeGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a10:3c81::/32
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c440::/29
2a14:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
05:24:12:b4:81:fe:9a:7e:3f:7d:2b:19:9c:fd:8e:c1:38:6f:
82:f6:d4:a1:f0:d2:56:7f:a3:ee:64:9e:48:52:25:23:25:57:
8e:9a:28:8d:86:87:bb:c1:b2:c9:51:d7:dd:a4:34:18:94:fb:
f8:29:b7:b2:fe:60:5f:0b:a9:28:a1:00:a6:13:47:8a:c9:aa:
a2:15:48:20:54:bf:ef:29:1e:6f:df:94:6f:cd:b3:98:d6:47:
dd:a2:09:ae:2a:b7:08:57:36:c5:ee:14:7c:14:3f:6b:b2:7e:
b8:6f:66:2a:a2:eb:ce:31:28:f2:c0:4e:26:94:72:0f:7b:69:
77:de:41:27:82:8e:f0:4a:a6:5a:f8:34:2e:c2:45:87:0e:6f:
7e:72:79:f7:79:1b:ca:92:2e:77:72:6f:53:3d:27:19:22:28:
03:fa:46:ac:6a:49:6d:0f:31:60:fb:04:b7:a0:39:23:3a:42:
85:07:3d:65:83:c7:35:90:4c:32:ac:b3:49:ff:0b:27:20:3b:
db:89:13:f8:c9:b6:d2:d1:12:cf:3b:ea:21:56:86:3f:d7:84:
9c:d2:28:41:50:d7:00:7b:f7:a6:1a:5d:ee:30:ad:66:0b:73:
f8:5d:47:3a:59:8c:ad:6b:35:2b:5c:a0:9f:0e:70:14:db:35:
b8:17:06:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:33:00 2026 by rpki-client